3 ms·
Not sure what you mean about non-MS things using AD. sssd-ad is a fine client and uses kerberos, not NTLM.
by spydum 9y ago
Not sure what you mean about non-MS things using AD. sssd-ad is a fine client and uses kerberos, not NTLM.
- adekok 9y agoYou can take a clear-text password and authenticate it to AD via kerberos. If you have MS-CHAP data, you can't convert it to something which will be accepted by kerberos. You MUST send it to AD as MS-CHAP data (i.e. ntlm), and then AD returns "pass / fail"